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EXCHANGE KEYS IN A PROTECTED MANNER 



CONFIRM ENDPOINTS USING BILATERAL AUTHENTICATION 



ENCRYPT DATA TO BE TRANSFERRED 



PROVISION DATA WITHOUT DISCRETE HARDWARE SIM DEVICE 



DECRYPT DATA 



VERIFY INTEGRITY 
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ESTABLISH SECURE OPERATING ENVIRONMENT 



LOAD SIM DATA OBJECTS IN PROTECTED MEMORY UNDER 
CONTROL OF PROCESS THREAD EXECUTING IN 1 
PROTECTED PARTITION 
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SUPPLY AUTHORIZATION DATA TO TPM VIA TRUSTED PORT — 
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LOAD DECRYPTION KEYS USING PROCESS IN PROTECTED 

PARTITION 
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DECRYPT SIM DATA OBJECTS IN PROTECTED PARTITION; 
USE PLAIN TEXT SIM SECRET DATA IN PROTECTED 
MANNER 
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ENCRYPT SIM SECRET DATA IN PROTECTED PARTITION, 
STORE DATA AND BIND KEY(S) 
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